pcp
[Top] [All Lists]

Re: Secure connections writeup - please review

To: Nathan Scott <nathans@xxxxxxxxxx>
Subject: Re: Secure connections writeup - please review
From: fche@xxxxxxxxxx (Frank Ch. Eigler)
Date: Fri, 01 Feb 2013 10:16:24 -0500
Cc: PCP <pcp@xxxxxxxxxxx>
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <1786528910.14930673.1359700203435.JavaMail.root@xxxxxxxxxx> (Nathan Scott's message of "Fri, 1 Feb 2013 01:30:03 -0500 (EST)")
References: <2057809854.14927739.1359699701197.JavaMail.root@xxxxxxxxxx> <1786528910.14930673.1359700203435.JavaMail.root@xxxxxxxxxx>
User-agent: Gnus/5.1008 (Gnus v5.10.8) Emacs/21.4 (gnu/linux)
Nathan Scott <nathans@xxxxxxxxxx> writes:

> [...]
> http://oss.sgi.com/projects/pcp/pcp-gui.git/man/html/lab.secure.html

Looks good.  A few suggestions:

- mention the possibility of self-signed certificates, possibly
  working out an example

- add code to the code (client-side changes only?) to enable clients
  to download the server certificate during a first connection, and
  store it in $HOME/.pcp/ssl, to eliminate the manual steps in the
  "Monitor Setup" section.

- consider defaulting to PCP_SECURE_SOCKETS=1


- FChE

<Prev in Thread] Current Thread [Next in Thread>